Open
Fix CVE-2026-48863 (openEuler-20.03-LTS-SP2) #105
易大夫Add on 5 days ago
Fix CVE-2026-48863 (openEuler-20.03-LTS-SP2) #105
Open
Total: 2 files changed+27-1
| @@ -0,0 +1,22 @@ | |||
| 1 | +From 44f8c085045b1f771641091bbb2b810d12cff9e8 Mon Sep 17 00:00:00 2001 | ||
| 2 | +From: Michael Schroeder <mls@suse.de> | ||
| 3 | +Date: Tue, 26 May 2026 10:30:31 +0200 | ||
| 4 | +Subject: [PATCH] Fix wrong variable being used in solv_pgpvrfy | ||
| 5 | + | ||
| 6 | +--- | ||
| 7 | + ext/solv_pgpvrfy.c | 2 +- | ||
| 8 | + 1 file changed, 1 insertion(+), 1 deletion(-) | ||
| 9 | + | ||
| 10 | +diff --git a/ext/solv_pgpvrfy.c b/ext/solv_pgpvrfy.c | ||
| 11 | +index 9f1bd72e6..9358558bc 100644 | ||
| 12 | +--- a/ext/solv_pgpvrfy.c | ||
| 13 | ++++ b/ext/solv_pgpvrfy.c | ||
| 14 | +@@ -589,7 +589,7 @@ solv_pgpvrfy(const unsigned char *pub, int publ, const unsigned char *sig, int s | ||
| 15 | + if (rlen) | ||
| 16 | + memcpy(sigdata + 32 - rlen, r, rlen); | ||
| 17 | + if (slen) | ||
| 18 | +- memcpy(sigdata + 64 - slen, s, rlen); | ||
| 19 | ++ memcpy(sigdata + 64 - slen, s, slen); | ||
| 20 | + res = mped25519(pub + 1 + 10 + 2 + 1, sigdata, sig + 2, hashl); | ||
| 21 | + break; | ||
| 22 | + } | ||
| @@ -15,7 +15,7 @@ | |||
| 15 | 15 | ||
| 16 | Name: libsolv | 16 | Name: libsolv |
| 17 | Version: 0.7.14 | 17 | Version: 0.7.14 |
| 18 | -Release: 6 | 18 | +Release: 7 |
| 19 | Summary: Package dependency solver | 19 | Summary: Package dependency solver |
| 20 | License: BSD | 20 | License: BSD |
| 21 | URL: https://github.com/openSUSE/libsolv | 21 | URL: https://github.com/openSUSE/libsolv |
| @@ -25,6 +25,7 @@ Patch0: Fix-memory-leaks.patch | |||
| 25 | Patch1: Fix-segfault-in-resolve_jobrules.patch | 25 | Patch1: Fix-segfault-in-resolve_jobrules.patch |
| 26 | Patch2: Fix-Memory-leaks-in-SWIG-generated-code-for-Python.patch | 26 | Patch2: Fix-Memory-leaks-in-SWIG-generated-code-for-Python.patch |
| 27 | Patch3: use-memmove-for-overlapping-regions.patch | 27 | Patch3: use-memmove-for-overlapping-regions.patch |
| 28 | +Patch4: backport-CVE-2026-48863.patch | ||
| 28 | 29 | ||
| 29 | #fix CVE-2021-3200,CVE-2021-44568,CVE-2021-44569,CVE-2021-44571,CVE-2021-44573,CVE-2021-44574,CVE-2021-44575,CVE-2021-44576,CVE-2021-44577,CVE-2021-33938,CVE-2021-33929,CVE-2021-33928,CVE-2021-33930 | 30 | #fix CVE-2021-3200,CVE-2021-44568,CVE-2021-44569,CVE-2021-44571,CVE-2021-44573,CVE-2021-44574,CVE-2021-44575,CVE-2021-44576,CVE-2021-44577,CVE-2021-33938,CVE-2021-33929,CVE-2021-33928,CVE-2021-33930 |
| 30 | 31 | ||
| @@ -196,6 +197,9 @@ Python 3 version. | |||
| 196 | %{_mandir}/man3/%{name}*.3* | 197 | %{_mandir}/man3/%{name}*.3* |
| 197 | 198 | ||
| 198 | %changelog | 199 | %changelog |
| 200 | +* Mon Nov 02 2026 sunyanan <sunyanan@xfusion.com> - 0.7.14-7 | ||
| 201 | +- backport fix for CVE-2026-48863 | ||
| 202 | + | ||
| 199 | * Fir Mar 04 2022 xingxing <xingxing9@h-partners.com> - 0.7.14-6 | 203 | * Fir Mar 04 2022 xingxing <xingxing9@h-partners.com> - 0.7.14-6 |
| 200 | - Type:cves | 204 | - Type:cves |
| 201 | - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577 | 205 | - CVE:CVE-2021-3200-CVE-2021-44568-CVE-2021-44569-CVE-2021-44571-CVE-2021-44573-CVE-2021-44574-CVE-2021-44575-CVE-2021-44576-CVE-2021-44577 |